Uncontrolled Memory Allocation in Suricata - #VU162669
Published: November 9, 2026
Vulnerability identifier: #VU162669
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-789
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to cause memory and CPU resource exhaustion in Suricata, degrading availability.
The vulnerability exists due to Suricata allocating its inspection buffer from an unvalidated SWF FileLength when SWF decompression is enabled and decompress-depth is set to zero, both non-default settings. An unauthenticated remote attacker can send a tiny compressed SWF body claiming a large length to trigger disproportionate allocation and zeroing.
Affected software
Suricata
Remediation
Install security update from vendor's website.
Suricata - update to 8.0.7